Skip to content

Latest commit

 

History

History
26 lines (21 loc) · 1.79 KB

README.md

File metadata and controls

26 lines (21 loc) · 1.79 KB
Raw

Bandit Plugin

The main function of the plugin is to present a top-level interface for a Bandit scanner.

This page is a short plugin description.
You may find additional information in a scanio-analyse article.

Installing Dependencies

If you build the Scanio code using Docker or pull a pre-built container, you do not need to separately install the Bandit dependencies. However, if you build the Scanio code to a binary, you will need to install Bandit before using the application. You can refer to the Bandit documentation for more information.

Commands

  • Analysing using bandit with an input file argument.
    scanio analyse --scanner bandit --input-file /Users/root/.scanio/output.file --format sarif -j 2
  • Analysing using bandit with a specific path .
    scanio analyse --scanner bandit --format json -j 1 /tmp/my_project
  • Analysing using bandit with an input file and custom rules.
    scanio analyse --scanner bandit --config /Users/root/scan-io-bandit-rules --input-file /Users/root/.scanio/output.file --format sarif -j 2
  • Analysing using bandit with an input file and additional arguments.
    scanio analyse --scanner bandit --input-file /Users/root/.scanio/output.file --format sarif -- --verbose --severity INFO

Results of the Command

If you use an input file argument the command will save results into a home directory: ~/.scanio/results/+<VCSURL>+<Namespace>+<repo_name>/<scanner_name>.<report_format>.

If you use a specific path argument the command will save results into the same directory:

  • scanio analyse --scanner <scanner_name> --format <report_format> /tmp/my_project
  • Result path - /tmp/my_project/<scanner_name>.<report_format>r>